← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99067

23 October 2026

reference to the root every time path resolution fails while printing scrub warnings. Every other error and success path of the function Drop the reference on the paths_from_inode() failure path too.

Introduced

3.2558540c17771eaf89b1a3be39aa2c8bc837da1a6

Fixed releases

6.12.113452a435b74f7f598a343c51f7c89c5d2244384b6

6.18.5712ba7d8b9cd45a2c6aa8f37c3f4b8a50422fb549

6.6.16041cabfbf3532e2a2a17be9e4876042a5393b5c8d

7.2.11a7e5992bc37088f9b00e531955022aef69de3dc7

7.31fd742c7479961da6d0bb794ef8ac6b7b9442847

View source announcement ↗